CVE-2026-73658

HIGH 8.2

Trigger.dev: Cross-tenant object store read and write via URL path traversal

CVSS Score

8.2

EPSS Score

0.0%

EPSS Percentile

0th

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params["*"] without rejecting dot segments and uses findResource: async () => 1 without per-resource ownership validation. WHATWG path normalization collapses .. segments before signing, allowing a caller with a valid environment API key to obtain presigned URLs for another tenant's object-store keys and read or overwrite task payloads. This issue is fixed in version 4.5.0-rc.5.

CWE	CWE-20 CWE-22 CWE-862
Vendor	triggerdotdev
Product	trigger.dev
Published	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for triggerdotdev trigger.dev

Be the first to know when new high vulnerabilities affecting triggerdotdev trigger.dev are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

triggerdotdev / trigger.dev

>= 4.4.2, < 4.5.0-rc.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v github.com: https://github.com/triggerdotdev/trigger.dev/pull/3830 github.com: https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e github.com: https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.5